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IN THE CLAIMS: 

Please write the claims to read as follows: 

Please cancel claims 1-20 without prejudice. 
1 1-20. (Canceled) 

Please add new claims 2\ et seq. : 



1 21 . (New) A method for use in a negotiated graceful takeover in a computer cluster 

2 having a first and second computer, the method comprising the steps of: 

3 detecting an operational fault at the first computer; 

4 requesting, from the first computer, in response to the operational fault, that the 

5 second computer take over for the first computer; 

6 requesting, fi-om the second computer, that the first computer shut down; 

7 completing service requests at the first computer pending at the time the first 

8 computer was requested to shut down; 

9 transferring responsibilities of the first computer to the second computer; and 

10 shutting down the first computer. 

1 22. (New) The method as in claim 21, further comprising: monitoring, from the second 

2 computer, for any operational faults at the first computer. 

1 23. (New) The method as in claim 21, further comprising: diagnosing, at the first com- 

2 puter, the operational fault of the first computer. 
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24. (New) The method as in claim 21, further comprising: requesting, from the first 
computer, that the second computer diagnose the operational fault of the first computer. 

25. (New) The method as in claim 21, further comprising: diagnosing, at the second 
computer, the operational fault of the first computer. 

26. (New) The method as in claim 21, fiirther comprising: sending, from the first com- 
puter to the second computer, an indication of the type of operational fault detected at the 
first computer. 

27. (New) The method as in claim 21, further comprising: determining, at the second 
computer, if the second computer can take over for the first computer before requesting 
the shut down of the first computer. 

28. (New) The method as in claim 21, fiirther comprising: refiising fiirther service re- 
quests at the first computer after the first computer was requested to shut dovra. 

29. (New) The method as in claim 21 , further comprising: transferring access of a stor- 
age device for the first computer to the second computer. 

30. (New) The method as in claim 21, fiirther comprising: asserting, at the second com- 
puter, disk reservations of disks of the first computer. 

31. (New) The method as in claim 21, fiirther comprising: rerouting file service requests 
from the first computer to the second computer. 
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1 32. (New) The method as in claim 21, further comprising: activating, at the second 

2 computer, network interfaces and network addresses that replicate those of the first com- 

3 puter. 

1 33. (New) The method as in claim 21, further comprising: initiating a countdown timer 

2 subsequent to the shut down request from the second computer. 

1 34. (New) The method as in claim 33, further comprising: forcing the first computer to 

2 shut down in the event the first computer is still operating at the expiration of the count- 

3 dovm timer. 

1 35. (New) The method as in claim 21, further comprising: detecting, at the second com- 

2 puter, the shut down of the first computer by the absence of a periodic heartbeat signal. 

1 36. (New) The method as in claim 21, further comprising: storing, at the first computer, 

2 state information of the first computer prior to shutting down. 

1 37. (New) The method as in claim 21, further comprising: sending periodic requests 

2 from the second computer to the first computer to remain shut down, after the first com- 

3 puter has shut down. 

1 38. (New) The method as in claim 21, further comprising: requesting, from the first 

2 computer, that the second computer restore responsibilities of the first computer to the 

3 first computer. 
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39. (New) The method as in claim 21, further comprising: restoring responsibilities of 
the first computer to the first computer upon restart of the first computer. 

40. (New) The method as in claim 21, further comprising: restoring responsibilities of 
the first computer to the first computer upon curing the operational fault of the first com- 
puter. 

41 . (New) The method as in claim 21 , further comprising: using the first and second 
computers as a file servers. 

42. (New) A storage system capable of performing a negotiated graceful takeover, the 
storage system comprising: 

a first computer; 

a second computer; 

a first processor for the first computer to 

i) detect an operational fault at the first computer, and 

ii) request, in response to the operational fault, that the second computer 
take over for the first computer; and 

a second processor for the second computer to 

i) request that the first computer shut dovm, 

ii) allow the first computer to complete service requests pending at the 
time the first computer was requested to shut down, 

iii) take over any responsibilities of the first computer, and 
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iv) allow the first computer to shut down. 

43. (New) The storage system as in claim 42, further comprising: a failover monitor to 
monitor for any operational faults at the first computer. 

44. (New) The storage system as in claim 42, further comprising: the first processor to 
diagnose the operational fault of the first computer. 

45. (New) The storage system as in claim 42, further comprising: the first processor to 
request that the second computer diagnose the operational fault of the first computer. 

46. (New) The storage system as in claim 42, further comprising: the second processor 
to diagnose the operational fault of the first computer. 

47. (New) The storage system as in claim 42, further comprising: the first processor to 
send, to the second computer, an indication of the type of operational fault detected at the 
first computer. 

48. (New) The storage system as in claim 42, further comprising: the second processor 
to determine if the second computer can take over for the first computer before requesting 
the shut down of the first computer. 

49. (New) The storage system as in claim 42, further comprising: the first processor to 
refuse further service requests at the first computer after the first computer was requested 
to shut down. 
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50. (New) The storage system as in claim 42, further comprising: 

a storage device for the first computer; and 

an interconnect to transfer access of the storage device for the first computer to 
the second computer. 

51. (New) The storage system as in claim 42, further comprising: disks of the first com- 
puter, the disks to be reserved by the second computer while the first computer is shut 
down. 

52. (New) The storage system as in claim 42, further comprising: an interconnect to re- 
route file service requests from the first computer to the second computer. 

53. (New) The storage system as in claim 42, further comprising: 

network interfaces at the first computer; 
network addresses at the first computer; 

network interfaces at the second computer that replicate the network interfaces of 
the first computer; and 

network addresses at the second computer that replicate the network interfaces of 
the first computer, the network interfaces and addresses at the second computer that rep- 
licate the network interfaces and addresses of the first computer to be activated by the 
second computer while the first computer is shut down. 
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54. (New) The storage system as in claim 42, further comprising: a countdown timer, 
the countdown timer to be initiated subsequent to the shut down request from the second 
computer. 

55. (New) The storage system as in claim 54, further comprising: an interconnect to 
force the first computer to shut down in the event the first computer is still operating at 
the expiration of the countdown timer. 

56. (New) The storage system as in claim 42, further comprising: an interconnect at the 
second computer to detect the shut down of the first computer by the absence of a peri- 
odic heartbeat signal. 

57. (New) The storage system as in claim 42, further comprising: persistent memory at 
the first computer to store state information of the first computer prior to shutting down. 

58. (New) The storage system as in claim 42, further comprising: an interconnect at the 
second computer to send periodic requests to the first computer to remain shut down, af- 
ter the first computer has shut down. 

59. (New) The storage system as in claim 42, further comprising: the first processor to 
request that the second computer restore responsibilities of the first computer to the first 
computer. 
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60. (New) The storage system as in claim 42, further comprising: an interconnect to re- 
store responsibilities of the first computer to the first computer upon restart of the first 
computer. 

61. (New) The storage system as in claim 42, further comprising: an interconnect to re- 
store responsibilities of the first computer to the first computer upon curing the opera- 
tional fault of the first computer. 

62. (New) The storage system as in claim 42, fiirther comprising: the first and second 
computers are file servers. 

63. (New) A storage system capable of performing a negotiated graceful takeover, the 
storage system comprising: 

a first computer; 

a second computer; 

means for detecting an operational fault at the first computer; 

means for requesting, fi"om the first computer, in response to the operational fault, 
that the second computer take over for the first computer; 

means for requesting, from the second computer, that the first computer shut 

down; 

means for completing service requests at the first computer pending at the time 
the first computer was requested to shut down; 

means for transferring responsibilities of the first computer to the second com- 
puter; and 

means for shutting down the first computer. 
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64. (New) A computer readable media, comprising: the computer readable media con- 
taining instructions for execution in a processor for the method of, 

detecting an operational fault at a first computer; 

requesting, from the first computer, in response to the operational fault, that a 
second computer take over for the first computer; 

requesting, from the second computer, that the first computer shut down; 

completing service requests at the first computer pending at the time the first 
computer was requested to shut down; 

transferring responsibilities of the first computer to the second computer; and 

shutting down the first computer. 



65. (New) Electromagnetic signals propagating on a computer network, comprising: the 
electromagnetic signals carrying instructions for execution in a processor for the method 
of, 

detecting an operational fault at a first computer; 

requesting, fi:om the first computer, in response to the operational fault, that a 
second computer take over for the first computer; 

requesting, from the second computer, that the first computer shut down; 

completing service requests at the first computer pending at the time the first 
computer was requested to shut dovm; 

transferring responsibilities of the first computer to the second computer; and 

shutting down the first computer. 
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IN THE DRAWINGS: 

Please replace the informal Figures 1-5 of the Drawing with the formal versions 
attached herewith. Figure 5 has been amended, and an informal annotated sheet of Figure 
5 with the changes marked in red has also been attached. 
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